CVE-2025-10233 | kalcaddle kodbox 1.61 editor.class.php fileGet/fileSave path path traversal

A vulnerability has been found in kalcaddle kodbox 1.61 and classified as critical. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal.

This vulnerability is documented as CVE-2025-10233. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.